Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa9009c6-e724-390b-a54d-e0dcac9c1583.roa
File:                     fa9009c6-e724-390b-a54d-e0dcac9c1583.roa (raw, json)
Hash identifier:          c6MQ4OcpUnTeulmm5EyKEfP7GXS26OC7bW1sgBs6+bo=
Subject key identifier:   69:06:AB:0F:9E:17:9A:83:9A:66:E2:7A:BD:0A:98:42:81:55:D4:8F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858472835F6584AAF7A18ED593780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa9009c6-e724-390b-a54d-e0dcac9c1583.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        174.254.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:f6:58:4a:af:7a:18:ed:59:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=514d7558-f755-46a0-9d26-92855b1aefd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:d8:b1:e2:e7:1f:f5:30:35:8a:bb:d6:54:
                    84:81:1f:16:cb:4a:2b:e6:ab:37:b3:a4:5e:74:2f:
                    c3:51:b9:98:cb:d4:a1:c3:86:2f:d5:49:7a:b4:60:
                    47:af:79:68:ac:56:2d:d0:b8:04:bf:8b:fe:32:5f:
                    f1:8d:1f:ed:bb:97:70:9a:47:00:9c:0a:b4:06:4e:
                    9a:c6:3d:ec:a7:7c:0b:9c:41:96:29:a8:ea:5f:0a:
                    09:ce:9b:34:a2:6f:e3:78:ea:37:43:18:e1:af:6a:
                    8d:a1:a2:68:00:a1:c0:b6:fa:06:88:19:79:18:45:
                    79:ea:7a:59:8f:78:a8:75:da:43:44:2d:97:ec:52:
                    39:b7:13:45:55:76:8c:fb:8f:0c:0e:c0:d6:3b:d2:
                    b7:bb:d1:29:0b:d3:b0:e2:03:4d:3d:8a:01:2e:4f:
                    fa:91:3a:b0:24:8c:44:c7:c0:14:e2:a4:08:da:76:
                    1c:2a:35:92:d4:71:9c:c2:e7:49:74:cd:c9:4a:03:
                    66:10:28:8f:80:b5:6e:3c:54:ec:6d:ea:34:99:e9:
                    97:82:06:d4:9b:ce:c8:38:06:45:1f:7a:fd:6f:97:
                    ff:1b:cb:61:b1:d4:0d:fc:9b:2c:fd:41:6f:82:9f:
                    98:92:6d:40:a1:14:69:07:1c:96:92:d9:05:08:60:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:06:AB:0F:9E:17:9A:83:9A:66:E2:7A:BD:0A:98:42:81:55:D4:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa9009c6-e724-390b-a54d-e0dcac9c1583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.254.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:e0:e8:4b:65:f6:be:5c:02:5a:c3:ac:6e:27:78:e7:92:eb:
         7d:dd:3c:1b:bb:a6:5b:be:eb:8d:3d:49:d7:27:f4:c7:90:29:
         b5:5a:d8:9a:7a:46:ef:c7:66:e4:14:5e:16:36:4b:b7:4a:eb:
         cc:c8:7f:69:61:82:5d:51:ef:82:be:9e:7d:de:b9:77:66:9d:
         60:a5:c0:8c:a4:34:a4:36:d4:63:b2:46:40:4d:2e:bf:fa:9b:
         df:ca:04:4c:66:a2:d5:50:5a:59:32:4e:8c:ab:35:08:8d:55:
         0b:5f:49:c1:09:6c:db:05:3a:23:de:2d:53:77:a1:ea:f2:df:
         13:c2:42:24:a0:9c:be:3e:33:bd:34:57:c6:f5:28:b9:94:35:
         2a:91:b5:10:b9:c3:cb:8c:f6:50:52:fa:6e:04:41:5a:c3:92:
         9f:d8:50:e2:7a:61:23:9d:cd:0a:a2:2d:1d:e4:16:25:fd:3f:
         ac:06:01:25:cc:3d:32:8c:59:3b:91:03:c5:4b:ce:9b:b9:e8:
         8f:c2:31:3a:5d:57:a0:65:c1:95:c9:d5:3f:29:e0:78:fb:96:
         c5:80:a9:ea:98:ea:a1:f4:36:22:8a:8e:d6:74:68:48:6d:5c:
         9c:33:13:9f:1e:59:3d:65:55:14:e7:38:9d:aa:2b:1d:21:3a:
         ca:34:5e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:33 2024 by rpki-client on console-fra.rpki-client.org